WHAT IS CLAIMED IS: 

1 . A packet relaying apparatus comprising: 

first means for selecting one or more transmission destination virtual 
private network identifiers which are allowed to relay a received packet based 
on a transmission source virtual private network identifier related to the 
received packet; 

second means for selecting one or more transmission destination 
domain identifiers corresponding to each of said one or more transmission 
destination virtual private network identifiers; 

third means for collating, using a mask, a next relaying apparatus 
address of the received packet with each routing information stored in one or 
more domain relaying means which corresponds to each of the one or more 
domain identifiers to select the next relaying apparatus address; and 

fourth means for transmitting the received packet in accordance with 
the next relaying apparatus address selected by the third means. 

2. The packet relaying apparatus according to 1 , wherein the first 
means selects one or more transmission destination virtual private network 
identifiers which are allowed to relay a received packet based on a 
transmission source virtual private network identifier corresponding to a 
receiving interface from which the received packet has been received. 

3. The packet relaying apparatus according to 1 , wherein the first 
means selects one or more transmission destination virtual private network 
identifiers which are allowed to relay a received packet based on a 
transmission source virtual private network identifier corresponding to an 
Internet Protocol address of the received packet. 



4. The packet relaying apparatus according to 1 , wherein the first 
means selects, in accordance with priority order, one or more transmission 
destination virtual private network identifiers which have the priority order 
respectively and are allowed to relay a received packet based on the 
5 transmission source virtual private network identifier related to the received 
packet. 



5. The packet relaying apparatus according to 1, wherein the 
second means selects, in accordance with priority order, one or more 
fes 10 transmission destination domain identifiers having priority order respectively, 
h i corresponding to each of the one or more transmission destination virtual 

li private network identifiers. 
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« 6. The packet relaying apparatus according to 1, wherein the first 

m - 

UJ 15 means further comprises a routing filter for filtering routing information to 

111 set the routing information selected with the routing filter to a domain 

It 

f|| relaying table. 



7. The packet relaying apparatus according to 1 , wherein the first 
20 means further comprises a routing filter for filtering the routing information 
to update one of at least two domain relaying tables; 

wherein the routing filter sets the routing information to said one 
of at least two domain relaying tables selected by the routing filter. 



25 8. A packet relaying method comprising: 

selecting one or more transmission destination virtual private network 
identifiers which are allowed to relay a received packet based on a 
transmission source virtual private network identifier related to the received 
packet; 
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selecting one or more transmission destination routing domain 
identifiers corresponding to each of said transmission destination virtual 
private network identifiers; 

collating a next relaying apparatus address of the received packet 
with each routing information stored in one or more domain relaying means 
which corresponds to each of the one or more domain identifiers to select the 
next relaying apparatus address; and 

transmitting the received packet in accordance with the next relaying 
apparatus address selected by the collating step. 

9. A packet relaying apparatus for transmitting a received packet 

to a next relaying apparatus in accordance with policy, comprising: 

first means for managing relationship between each of one or more 
transmission source virtual private network identifiers and one or more 
transmission destination virtual private network identifiers; 

second means for selecting one or more transmission destination 
virtual private network identifiers which are allowed to relay a received 
packet based on a transmission source virtual private network identifier 
related to the received packet by referencing to the first means; and " 

third means for sending, to the second means, a transmission source 
virtual private network identifier depending on an instruction such as a 
command from a terminal and receiving one or more transmission 
destination virtual private network identifiers corresponding to the 
transmission source virtual private network identifier, and displaying, on the 
terminal, relationship between the transmission source virtual private 
network identifier and the one or more destination virtual private network 
identifiers; 

wherein the received packet is transmitted to a next hop relaying 
apparatus of a transmission destination virtual private network allowed by 



the second means. 



10. The packet relaying apparatus according to 9, wherein 
the first means further comprises a table for storing a relationship between a 
transmission source virtual private network identifier and one or more 
transmission destination virtual private network identifiers. 

11. The packet relaying apparatus according to 9, wherein the 
third means receives, from the terminal, a transmission source virtual 
private network identifier and corresponding one or more transmission 
destination virtual private network identifiers to be additionally registered, 
and requests additional registration to the second means, and the second 
means registers the transmission source virtual private network identifier 
and the corresponding one or more transmission destination virtual private 
network identifiers into the first means. 

12. The packet relaying apparatus according to 9, wherein the 
third means requests deletion of a transmission source virtual private 
network identifier to be deleted which is received from the terminal to the 
second means and the second means deletes the transmission source virtual 
private network identifier. 

13. The packet relaying apparatus according to 9, wherein the 
third means requests, to the second means, alteration of a name of a 
transmission source virtual private network identifier requested to change 
the name which is received from the terminal and a new transmission source 
virtual private network identifier and the second means alters the name of 
the transmission source virtual private network identifier to the new 
transmission source virtual private network identifier. 



14. A packet relaying apparatus for transmitting a received packet 
to a next relaying apparatus in accordance with policy, comprising: 

first means for managing relationship between each of one or more 
transmission source virtual private network identifiers and one or more 
transmission destination virtual private network identifiers; 

second means for selecting one or more transmission destination 
virtual private network identifiers which are allowed to relay a received 
packet based on a transmission source virtual private network identifier 
related to the received packet by referencing to the first means; 

third means for requesting, to the second means, a list of one or more 
transmission destination routing domains identifiers corresponding to each 
of one or more transmission destination virtual private network identifiers set 
in a domain relaying policy table based on an instruction as a command from 
a terminal, the instruction having one or more transmission destination 
virtual private network identifiers as an operand; and 

fourth means for extracting the one or more transmission destination 
routing domain identifiers from the domain relaying policy table based on the 
request received from the third means and extracting one or more 
transmission destination routing domains identifiers corresponding to each 
of the transmission destination virtual private network identifiers; 

wherein the third means displays, on the terminal, the extracted each 
transmission destination virtual private network identifiers and the list of the 
one or more transmission destination routing domains corresponding to each 
of the transmission destination virtual private network identifiers. 
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